Design/Logic Flaw

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

CVE-2013-4622

The CVE-2013-4622 entry concerns the HTC Droid Incredible 3G Mobile Hotspot feature, where the device ships with a default WPA2 PSK of 1234567890. The underlying issue is the predictable default passphrase, which can allow a remote attacker within WLAN range to gain access to the hotspot. Documen...

CVE-2013-4622

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

PT-2013-5102

Name of the Vulnerable Software and Affected Versions HTC Droid Incredible affected versions not specified Description The issue concerns the 3G Mobile Hotspot feature, which has a default WPA2 PSK passphrase of 1234567890. This makes it easier for remote attackers to obtain access by leveraging ...

CVE-2013-4622: Undefined Security Weakness

The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area...

Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges

Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...

The Broadcom LAN chip BCM4325 AND BCM4329 denial of service vulnerability-vulnerability warning-the black bar safety net

This vulnerability is the Broadcom Wireless card firmware, the model for the BCM4325 and the BCM4329, the attacker can send specific wireless network packets causing a denial of service attack. A major influence on the equipment: BCM4325 Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid...

Unfixed XSS vulnerability at www.internetdisk.co.kr

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.internetdisk.co.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is current...

Unfixed XSS vulnerability at www.seoulsemicon.co.kr

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.seoulsemicon.co.kr, which at the time of submission ranked 3265759 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is...

Unfixed XSS vulnerability at www.aboki.net

Security researcher Droid, has submitted on 14/01/2012 a cross-site-scripting XSS vulnerability affecting www.aboki.net, which at the time of submission ranked 246325 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/01/2012. It is currently...

Mobile Madness

Admit it. It would scarcely break your heart if the legions of slack-jawed smartphone Facebook and FourSquare gawkers were forced to confront their own digital mortality – however briefly – with a few scary exploits made just for them. In 2011, the untethered among us saw several mobile security...

Unfixed XSS vulnerability at www.buynhhouses.com

Security researcher Droid, has submitted on 04/08/2011 a cross-site-scripting XSS vulnerability affecting www.buynhhouses.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...

Unfixed XSS vulnerability at dl-millennium.postech.ac.kr

Security researcher Droid, has submitted on 04/08/2011 a cross-site-scripting XSS vulnerability affecting dl-millennium.postech.ac.kr, which at the time of submission ranked 106484 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It ...

Nmap for Android Phones !!

droidmap is an android application for root users that implements some functions of NMAP in a GUI in Android. This program comes with installer scripts for the installation of the required NMAP application that must be run to install the program to your phone. Please note that the installation...

Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit

No description provided by source. Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit Date: 14/11/2010 Author: Itzhak Avraham, mj Tested on: Droid 2.1 CVE : CVE-2010-1807 Better exploit better rate and more flexible for changes, also shorter shellcode than what you have...

Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit

Exploit for Android platform in category remote exploits ============================================================== Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit ============================================================== Exploit Title: Android 2.0/2.1 Use-After-Free Remot...

Android 2.0 / 2.1 Use-After-Free Remote Code Execution

Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit Date: 14/11/2010 Author: Itzhak Avraham, mj Tested on: Droid 2.1 CVE : CVE-2010-1807 Better exploit better rate and more flexible for changes, also shorter shellcode than what you have, plus, it's also verified. Enjoy!...

Google Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit

Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit Date: 14/11/2010 Author: Itzhak Avraham, mj Tested on: Droid 2.1 CVE : CVE-2010-1807 Better exploit better rate and more flexible for changes, also shorter shellcode than what you have, plus, it's also verified. Enjoy!...

Google Android 2.02.1 - Use-After-Free Remote Code Execution on Webkit

Google Android 2.02.1 - Use-After-Free Remote Code Execution on Webkit Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit Date: 14/11/2010 Author: Itzhak Avraham, mj Tested on: Droid 2.1 CVE : CVE-2010-1807 Better exploit better rate and more flexible for changes, also...

Researcher Publishes Android Browser Exploit

UPDATE: A researcher at security firm Alert Logic has published code that could be used to compromise some versions of Google’s Android Operating System. The exploit, if properly adapted, could make Android phones vulnerable to remote attacks and compromises. Researcher MJ Keith published a Rever...